The Symantec Endpoint Protection (SEP) client Web Traffic Redirection (WTR) feature is enabled, but the system proxy settings do not point to http://localhost:2968/proxy.pac. The AutoConfigURL value under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings is not updated.
This problem happens when the proxy settings configured by the WTR engine are overwritten by Windows, or another application.
The WTR engine configures proxy settings by modifying the registry. The following table describes the registry changes made by WTR and the reason for the individual changes.
Disables per-user proxy settings – this forces all applications to use the system proxy settings instead of any settings configured for the user under HKEY_CURRENT_USER
If possible, do not apply Domain policies that configure any proxy settings on computers configured to use WTR. Specifically, ensure any Domain policy applied to the computer sets the value of Computer Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Make proxy settings per-machine (rather than per-user) is Not Configured. If proxy settings are configured by GPO, those settings will override what WTR sets on the system and may disrupt the web browsing experience.
Configuring proxy settings through other methods may also create a conflict on client computers. Applications like Fiddler, Virtual Private Network (VPN) clients, and Web anonymizer applications are known to configure proxy settings. Where possible, these applications should be disabled, or configured to leave proxy settings intact when WTR is enabled.
Subscribing will provide email updates when this Article is updated. Login is required.